ft-scout@9.4.9
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe runtime telemetry path can send task text and project identifiers to the package’s Firestore service whenever a paired session ID is present. Pairing discloses that telemetry streams, but the identifying and potentially sensitive work context makes this a real telemetry risk rather than a clean result.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Agent execution while a paired session ID is stored in ~/.ft/scout_telemetry.json.
Impact
The package service receives user task text and project identifiers, which may reveal sensitive work context.
Mechanism
The agent writes its current goal and project basename into telemetry; the telemetry helper uploads the record to Firestore when a session ID is present.
AI rationale
The runtime telemetry path can send task text and project identifiers to the package’s Firestore service whenever a paired session ID is present. Pairing discloses that telemetry streams, but the identifying and potentially sensitive work context makes this a real telemetry risk rather than a clean result.
Evidence
bin/src/engine/agentEngine.jsbin/src/utils/qrBridge.js~/.ft/scout_telemetry.json
Network endpoints1
firestore.googleapis.com
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Agent telemetry records the current task goal and project basename.
- When a stored session ID exists, telemetry is PATCHed to the package’s Firestore project.
- The pairing flow describes telemetry as streaming to Scout Mission Control.
Evidence against
- The manifest has no install, preinstall, or postinstall lifecycle script.
- The email code uses configured mail credentials to send signup welcome messages to the supplied account email.
- Telemetry is associated with an explicit Scout Companion pairing flow.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
19 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/server/server.jsView file
3import path from 'path';
L4: import { exec } from 'child_process';
L5: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/src/server/server.jsView on unpkg · L3Findings
4 Critical12 High5 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationbin/src/utils/qrBridge.js
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/qrBridge.js
CriticalPrevious Version Dangerous Deltabin/src/engine/voiceEngine.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/server/server.js
HighShellbin/src/commands/watch.js
HighSame File Env Network Executionbin/src/utils/holoseneAuth.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighRemote Agent Bridgebin/src/engine/agentEngine.js
HighTrigger Reachable Credential Exfiltration
Affected versions and remediation
This report applies to ft-scout@9.4.9.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@9.4.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.